Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: KX9NkNijGcf+Tw3DcGTzxdGLn55645S8BQPdQj/bNRM=
Subject key identifier: 3E:D3:46:C4:21:6C:21:58:3C:4E:F1:75:88:60:4F:79:D1:27:21:1E
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 019CE85C01EAFDBBDF2EF67972EFEA28A901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 1269
Signing time: Fri 13 Mar 2026 18:01:09 +0000
Manifest this update: Fri 13 Mar 2026 18:01:09 +0000
Manifest next update: Sat 14 Mar 2026 18:01:09 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: SVZm4UVSc1xnUSgehVPVkyV1bPOg6+DwGELSOCh+sjw=)
2: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:5c:01:ea:fd:bb:df:2e:f6:79:72:ef:ea:28:a9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Mar 13 18:01:09 2026 GMT
Not After : Mar 14 18:01:09 2026 GMT
Subject: CN=3ed346c4216c21583c4ef17588604f79d127211e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:af:1c:10:59:3d:09:c7:6f:a3:7e:ca:17:
50:2f:46:65:c8:d0:d6:1e:40:c2:ba:17:21:e4:dc:
b4:00:93:bc:f5:2d:c3:8a:f6:ef:58:70:59:4e:6e:
0e:30:0e:f5:04:0c:f0:c0:41:65:68:ca:b5:95:5d:
0b:b4:19:03:55:40:b4:0c:7d:e7:23:db:ab:a1:74:
50:e2:18:0d:b9:3a:49:53:3e:78:f9:ae:45:e7:8f:
14:cd:42:db:7d:89:d8:64:66:7a:a3:02:e1:6e:38:
ef:01:2a:38:11:2a:3f:7d:fd:f3:ad:12:ee:95:86:
f1:0a:1b:d8:30:17:7d:00:21:52:7a:ad:51:ed:d2:
1d:38:d0:e4:2b:6b:78:ed:71:ba:3e:ce:15:f4:7c:
39:fe:0f:4f:53:b7:46:07:96:9b:04:32:1c:d0:d2:
fa:1e:38:1a:eb:0a:c0:27:6f:43:ef:9b:61:6c:8d:
1c:74:31:10:af:52:a3:a6:81:58:72:5b:ef:22:bd:
4b:3e:d5:6b:e8:1c:f4:9c:3c:c8:f9:02:eb:b0:83:
d4:60:a9:21:12:bb:f1:a1:a8:b4:dc:23:db:f6:85:
ea:b3:be:81:dc:0f:a7:de:58:25:13:7b:b3:57:db:
e0:ab:c5:b6:9a:5a:8e:52:4f:bf:95:ab:c4:1f:12:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:46:C4:21:6C:21:58:3C:4E:F1:75:88:60:4F:79:D1:27:21:1E
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:66:f1:58:71:12:b3:07:81:8a:4a:51:e0:72:10:a4:a1:ef:
c6:4e:9e:ca:e0:20:53:26:44:dd:bb:e2:70:38:94:9f:b8:6c:
a0:70:bf:63:ad:7c:8d:cd:cb:ba:72:aa:0b:6a:26:fb:46:f2:
39:db:8f:d9:c9:2c:d9:7c:56:db:0b:b5:40:42:42:cf:73:ed:
aa:07:a9:da:22:5c:67:d2:74:8a:bf:c7:e0:6e:38:8f:16:9b:
72:a5:b1:e7:f1:6f:ee:fb:27:95:38:b6:d0:93:86:0d:63:65:
a1:b8:a8:91:ed:67:9f:de:2d:e0:b5:84:21:6f:c9:47:ca:5f:
46:e2:0f:a5:f4:6d:f7:c5:c2:85:f7:23:be:60:e2:42:93:d0:
b0:b7:73:d0:9b:b6:40:8d:e2:8b:74:69:7a:0b:f4:29:e5:ce:
f7:d7:a0:27:85:2a:6a:2d:e2:2b:78:25:6a:95:b7:18:a7:b9:
40:67:16:d0:51:23:49:20:a8:f1:3e:3d:7c:6c:57:db:2d:4e:
af:b2:54:ce:34:fc:71:21:7c:32:cf:37:05:cf:ac:4a:02:19:
ae:16:b9:60:96:d9:78:db:cc:fd:21:85:25:6e:79:e3:ae:c9:
9d:b0:86:ad:07:ee:c6:3a:b5:de:50:dc:19:94:a1:c4:df:8b:
a4:54:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:18:19 2026 by rpki-client